工具 | 安全相关的多媒体资源收集列表

发布时间：2018-06-13 15:46:08

# List of Helpful Information Security Multimedia

The channels listed here will eventually be monitored by <a rel="nofollow">@HackerTalkyTalk</a>&nbsp;, so that whenever new videos get uploaded, there's only one Twitter account you need to watch to keep track of new material as it gets released. :D

Feel free to add more to the list; this is pretty incomplete, but better than nothing for folks who are new. Pull requests or Twitter DMs are both fine :)

PLEASE NOTE: Each list is randomly ordered. <a rel="nofollow">@hexwaxwing</a>&nbsp; will reorder them more appropriately once more fully-enumerated lists are assembled.

<blockquote>
UPDATE (2-20-2018): Added a History &amp; Culture section, since I'm finding a lot of younger newcomers need help understanding the historical context of the hacker subculture in infosec. Also, added a TOC with links to the different sections. And a bunch of new entries.

</blockquote>
<blockquote>
UPDATE (2-19-2018): Added a few other sections that aren't really relevant to <a rel="nofollow">@HackerTalkyTalk</a>&nbsp;, but are useful for learners: Complete &amp; Utter Newbie Starting Resources, Practice Materials &amp;&amp; Labs, and Workstation VMs. 
</blockquote>

####Table of Contents

<ul>
<li><a>Infosec/Hacker Conference Talk Recordings</a>&nbsp; [127 conferences]
<ul>
<li><a>Infosec&amp;&amp;Hacker Cons</a>&nbsp; [84]</li>
<li><a>BSides</a>&nbsp; [43]</li>
<li><a>Meetups That Record Their Talks</a>&nbsp; [2]</li>
</ul>

</li>
<li><a>Other Audiovisual Multimedia</a>&nbsp;
<ul>
<li><a>Shows &amp;/or Livestreams</a>&nbsp; [40]</li>
<li><a>Podcasts</a>&nbsp; [86]</li>
</ul>

</li>
<li><a>Playgrounds!: Practice Materials &amp;&amp; Labs</a>&nbsp; [31]</li>
<li><a>Workstation VMs</a>&nbsp; [9]</li>
<li><a>Introductory Resources for the Complete Newbie</a>&nbsp; [7]</li>
<li><a>Hacker History &amp; Culture</a>&nbsp; [13]</li>
</ul>

<hr>

##Infosec&amp;&amp;Hacker Conference Talk Recordings

###Infosec&amp;&amp;Hacker Cons

<ol start="0">
<li><a rel="nofollow">3C/CCC</a>&nbsp;</li>
<li><a rel="nofollow">DEFCON</a>&nbsp;</li>
<li><a rel="nofollow">Infocon.org</a>&nbsp; <code>[talk+podcast aggregator; torrents available]</code></li>
<li><a rel="nofollow">Irongeek's channel</a>&nbsp; <code>[Collection of ~2000+ con videos from smaller American cons]</code>
<ul>
<li>DerbyCon: [III: 2011 • IV: 2012 • V: 2013 • IV: 2014 • V: 2015 • VI: 2016 • <a rel="nofollow">VII: 2017</a>&nbsp;]</li>
<li>Converge [2016 • 2017]</li>
<li>GrrCon [2015 • 2016 • 2017]</li>
<li>ANYCon [2017]</li>
<li>CircleCityCon [2014 • 2015 • 2016 • 2017]</li>
<li>ShowMeCon [2015 • 2016 • 2017]</li>
<li>NolaCon [2016 • 2017]</li>
<li>AIDE [2015 • 2017]</li>
<li>CypherCon [1.0: 2016 • 2.0: 2017]</li>
<li>BloomCon [2017]</li>
<li>PhreakNIC [<a rel="nofollow">XII: 2008</a>&nbsp;]</li>
<li>HouSecCon [#6: 2015]</li>
<li>ShmooCon [Firetalks: 2015]</li>
<li>DEFCON [Wireless Village: 2014]</li>
<li>OISF [<a rel="nofollow">2015</a>&nbsp;]</li>
<li>SecureWV/Hack3rcon: [VI: 2015 • VII: 2016 • <a rel="nofollow">VIII: 2017</a>&nbsp;]</li>
<li>Louisville Infosec [2013 • 2015 • 2016 • 2017]</li>
<li>BSides Tampa: [2015 • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>BSides NoVa (Northern Virginia) [2017]</li>
<li>BSides Cleveland [2014 • 2015 • 2017]</li>
<li>BSides Detroit [2015 • 2016 • 2017]</li>
<li>BSides Charm (Baltimore) [2017]</li>
<li>BSides Nashville [2014 • 2015 • 2017]</li>
<li>BSides Indy [2017]</li>
<li>BSides Philly (Philadelphia): [2016 • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>BSides Augusta [2015 • 2016]</li>
<li>BSides San Francisco [2015 • 2016]</li>
<li>BSidesLV (Las Vegas) [2012 • 2013 • 2015]</li>
<li>BSidesCincy (Cincinnati) [2015]</li>
<li>BSides Boston [2015]</li>
<li>BSides Columbus [2015]</li>
<li>BSidesRI (Rhode Island): [<a rel="nofollow">2013</a>&nbsp;]</li>
<li>BSides Chicago [2014]</li>
<li>BSidesDE (Delaware) [2013]</li>
</ul>

</li>
<li>Cooper (@Ministraitor): [<a rel="nofollow">YouTube</a>&nbsp; • <a rel="nofollow">archive.org</a>&nbsp;] <code>[Kinda like a European version of Irongeek]</code>
<ul>
<li>hack.lu: [<a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>eth0: [<a rel="nofollow">Winter 2017</a>&nbsp;]</li>
<li>MISP Summit: [<a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>SteelCon: [<a rel="nofollow">2016</a>&nbsp;]</li>
<li>HaxoGreen: [<a rel="nofollow">2016</a>&nbsp;]</li>
<li><a rel="nofollow">hardwear.io</a>&nbsp; (@hardwear_io): [<a rel="nofollow">2016 • 2017</a>&nbsp;] (FIXME: needs separate playlists for each year)</li>
<li>IRISSCON (<a rel="nofollow">@irisscert</a>&nbsp;): [<a rel="nofollow">2013</a>&nbsp; • 2014 • 2015 • 2016 • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>Securi-Tay (@AlbertayHackers): [<a rel="nofollow">IV: 2015</a>&nbsp; • <a rel="nofollow">V: 2016</a>&nbsp; • <a rel="nofollow">VI: 2017</a>&nbsp;]</li>
<li>OWASP Chapter Meetings: [<a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>BSides Ljubljana (@BSidesLjubljana): [<a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>BSides Hamburg (@HamburgSides): [<a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp;]</li>
<li>BSides Hannover (@BSidesHN): [<a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>BSides Belfast (@bsidesbelfast): [<a rel="nofollow">2016</a>&nbsp;]</li>
<li><a rel="nofollow">BSides Munich</a>&nbsp; (@BSidesMunich): [2017 (<a rel="nofollow">YouTube</a>&nbsp; | <a rel="nofollow">archive.org</a>&nbsp;)]</li>
<li><a rel="nofollow">BSides Bordeaux</a>&nbsp; (@BSidesBDX): [<a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">BSides Luxembourg</a>&nbsp; (@BSidesLux): [<a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">BSides Amsterdam</a>&nbsp; (@BSidesAMS): [<a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">BSides Manchester</a>&nbsp; (@BSidesMCR): [<a rel="nofollow">2014</a>&nbsp; inc. • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">BSides <del>Edinburgh</del> Scotland</a>&nbsp; (@BSidesScot): [<a rel="nofollow">2017</a>&nbsp;]</li>
</ul>

</li>
<li><a rel="nofollow">PhreakNIC</a>&nbsp;: <a rel="nofollow">VII: 2003</a>&nbsp; • <a rel="nofollow">VIII: 2004</a>&nbsp; • <a rel="nofollow">IX: 2005</a>&nbsp; • <a rel="nofollow">X: 2006</a>&nbsp; • <a rel="nofollow">XI: 2007</a>&nbsp; • <a rel="nofollow">XVI: 2012</a>&nbsp; • <a rel="nofollow">XVII: 2013</a>&nbsp; • <a rel="nofollow">XVIII: 2014</a>&nbsp; • <a rel="nofollow">IXX: 2015</a>&nbsp; • <a rel="nofollow">XX: 2016</a>&nbsp; • <a rel="nofollow">XXI: 2017</a>&nbsp; (cf. Irongeek's channel for PhreakNIC XII [2008])</li>
<li><a rel="nofollow">Hacktivity</a>&nbsp;</li>
<li><a rel="nofollow">S4</a>&nbsp; <code>[ICS]</code></li>
<li><a rel="nofollow">ZeroNights</a>&nbsp;</li>
<li><a rel="nofollow">REcon (@reconmtl @reconbrx)</a>&nbsp;: 2013 [<a rel="nofollow">YouTube</a>&nbsp;|<a rel="nofollow">REcon (in schedule talk descriptions)</a>&nbsp;] • 2014 [<a rel="nofollow">YouTube</a>&nbsp;|<a rel="nofollow">REcon</a>&nbsp;+<a rel="nofollow">slides</a>&nbsp;] • 2015 [<a rel="nofollow">YouTube</a>&nbsp;|<a rel="nofollow">REcon</a>&nbsp;+<a rel="nofollow">slides</a>&nbsp;] • 2016 [<a rel="nofollow">YouTube</a>&nbsp;|<a rel="nofollow">REcon</a>&nbsp;] • 2017 [<a rel="nofollow">YouTube</a>&nbsp;|<a rel="nofollow">REcon</a>&nbsp;) <code>[reverse engineering]</code></li>
<li><a rel="nofollow">BruCON</a>&nbsp;</li>
<li><a rel="nofollow">Hack in the Box (HITB)</a>&nbsp;</li>
<li><a rel="nofollow">SANS DFIR</a>&nbsp; <code>[DFIR + threat hunting + threat intel]</code></li>
<li><a rel="nofollow">SANS Pentesting</a>&nbsp; <code>[penetration testing]</code></li>
<li><a rel="nofollow">SANS ISC</a>&nbsp; <code>[netsec + nsm]</code></li>
<li><a rel="nofollow">GHP1989</a>&nbsp; • <a rel="nofollow">HEU1993</a>&nbsp; • <a rel="nofollow">HIP1997</a>&nbsp; • <a rel="nofollow">HAL2001</a>&nbsp; • <a rel="nofollow">WTH2005</a>&nbsp; • <a rel="nofollow">HAR2009</a>&nbsp; • <a rel="nofollow">OHM2013</a>&nbsp;: [...do recordings exist...?]</li>
<li><a rel="nofollow">SHA2017</a>&nbsp;: [<a rel="nofollow">YouTube</a>&nbsp; <a rel="nofollow">channel</a>&nbsp; • <a rel="nofollow">media.ccc.de</a>&nbsp;]</li>
<li>SAINTcon [<a rel="nofollow">playlists</a>&nbsp; &amp; <a rel="nofollow">videos</a>&nbsp;]</li>
<li><a rel="nofollow">Toorcon</a>&nbsp;</li>
<li><a rel="nofollow">ekoparty</a>&nbsp;</li>
<li><a rel="nofollow">Real World Crypto</a>&nbsp; <code>[cryptography]</code></li>
<li><a rel="nofollow">CarolinaCon</a>&nbsp; <code>[offsec]</code></li>
<li><a rel="nofollow">Wild West Hackin' Fest</a>&nbsp;</li>
<li><a rel="nofollow">Rooted Con</a>&nbsp;</li>
<li><a rel="nofollow">BalCCon</a>&nbsp;</li>
<li><a rel="nofollow">SEC-T</a>&nbsp;</li>
<li><a rel="nofollow">FSec</a>&nbsp;</li>
<li><a rel="nofollow">LayerOne</a>&nbsp;: <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;</li>
<li><a rel="nofollow">TROOPERScon</a>&nbsp;: <code>[defense + management + SAP + IPv6 + NGI + embedded + offsec]</code></li>
<li><a rel="nofollow">BlackAlps CyberSecurityConference</a>&nbsp;</li>
<li><a rel="nofollow">x33fcon</a>&nbsp; <code>[purple team]</code></li>
<li><a rel="nofollow">SkyDogCon</a>&nbsp;</li>
<li><a rel="nofollow">SecurityOnion Con</a>&nbsp; <code>[NSM+IDS+IPS]</code></li>
<li><a rel="nofollow">Nullcon Goa</a>&nbsp;: 2013 • 2014 • 2015 • 2016 • 2017 • 2018</li>
<li><a rel="nofollow">KansasFest</a>&nbsp; <code>[retro gaming, some reverse engineering]</code></li>
<li><a rel="nofollow">Botconf.eu</a>&nbsp; <code>[malware analysis]</code></li>
<li>ShmooCon: [<a rel="nofollow">2017</a>&nbsp; &amp; <a rel="nofollow">2018</a>&nbsp;]</li>
<li>SyScan360 Singapore: [<a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp;]</li>
<li>BlueHat IL (Israel): [<a rel="nofollow">2017</a>&nbsp; • <a rel="nofollow">2018</a>&nbsp;] (no official playlist, but all on <a rel="nofollow">this YouTube acct</a>&nbsp;)</li>
<li>Infiltrate: [<a rel="nofollow">2011</a>&nbsp; inc • 2012 • <a rel="nofollow">2013</a>&nbsp; inc • <a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>Hackers On Planet Earth (HOPE): [<a rel="nofollow">1994</a>&nbsp; • <a rel="nofollow">1997</a>&nbsp; • <a rel="nofollow">2000</a>&nbsp; • <a rel="nofollow">2002</a>&nbsp; • <a rel="nofollow">V: 2004</a>&nbsp; • <a rel="nofollow">IX: 2012</a>&nbsp; • <a rel="nofollow">X: 2013</a>&nbsp;]</li>
<li><a rel="nofollow">Code Blue</a>&nbsp; (@codeblue_jp): [<a rel="nofollow">2013</a>&nbsp; • <a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>HackerHotel: [<a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2018</a>&nbsp; (<a rel="nofollow">livestream</a>&nbsp;)] (needs to be separated into playlists)</li>
<li>NLUUG: [<a rel="nofollow">2015 • 2017</a>&nbsp;] (needs to be separated into playlists)</li>
<li>eth0:winter [2014 (<a rel="nofollow">wiki</a>&nbsp;) • 2015 (<a rel="nofollow">wiki</a>&nbsp;) • <a rel="nofollow">2016</a>&nbsp; (<a rel="nofollow">wiki</a>&nbsp;) • 2017 (<a rel="nofollow">wiki</a>&nbsp;)]</li>
<li>Electromagnetic Field (@emfcamp): [<a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp;]</li>
<li>Black Hat (Europe): [<a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>Black Hat (USA): [<a rel="nofollow">2013</a>&nbsp; • <a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>Black Hat (Asia): [<a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>r2con: [<a rel="nofollow">2017</a>&nbsp;]</li>
<li>LevelUp: [<a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">SteelCon</a>&nbsp;: [<a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>CanSecWest: [<a rel="nofollow">slides for 2000–2017</a>&nbsp;] [...do recordings exist...?]</li>
<li>PacSec: [<a rel="nofollow">slides for 2003–2017</a>&nbsp;] [...do recordings exist...?]</li>
<li>FOSDEM: [<a rel="nofollow">2003</a>&nbsp; • <a rel="nofollow">2004</a>&nbsp; • <a rel="nofollow">2005</a>&nbsp; • <a rel="nofollow">2006</a>&nbsp; • <a rel="nofollow">2007</a>&nbsp; • <a rel="nofollow">2008</a>&nbsp; • <a rel="nofollow">2009</a>&nbsp; • <a rel="nofollow">2010</a>&nbsp; • <a rel="nofollow">2011</a>&nbsp; • <a rel="nofollow">2012</a>&nbsp; • <a rel="nofollow">2013</a>&nbsp; • <a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>AppSecEU: [<a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>AppSecUSA: [<a rel="nofollow">2013</a>&nbsp; • <a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">OWASP</a>&nbsp; AppSec California: [<a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">Hack in Paris</a>&nbsp;: [<a rel="nofollow">2011</a>&nbsp; • <a rel="nofollow">2012</a>&nbsp; • <a rel="nofollow">2013</a>&nbsp; • <a rel="nofollow">2014</a>&nbsp; • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>H.A.C.K Camp:::<a rel="nofollow">CampZer0</a>&nbsp; (@campzer0): [<a rel="nofollow">2013</a>&nbsp; (<a rel="nofollow">slides</a>&nbsp;)]</li>
<li>H.A.C.K Camp:::Camp++: [<a rel="nofollow">2014</a>&nbsp; (<a rel="nofollow">slides</a>&nbsp;) • <a rel="nofollow">2015:0x7df</a>&nbsp; • <a rel="nofollow">2016:0x7e0</a>&nbsp; • <a rel="nofollow">2017:0x7e1</a>&nbsp;]</li>
<li><a rel="nofollow">NorthSec</a>&nbsp;: [<a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">TRISS</a>&nbsp;: <a rel="nofollow">2017</a>&nbsp;</li>
</ol>

###BSides

<ol start="0">
<li><a rel="nofollow">BSidesLV (Las Vegas)</a>&nbsp;: [irongeek: 2012 • 2013 • 2015]</li>
<li><a rel="nofollow">BSidesLisbon</a>&nbsp;</li>
<li><a rel="nofollow">BSidesRaleigh</a>&nbsp;</li>
<li><a rel="nofollow">BSidesCapeTown</a>&nbsp;</li>
<li><a rel="nofollow">BSidesStJohns</a>&nbsp;</li>
<li><a rel="nofollow">BSidesLondon</a>&nbsp;</li>
<li><a rel="nofollow">BSidesVancouver</a>&nbsp;</li>
<li><a rel="nofollow">BSidesIOWA</a>&nbsp;</li>
<li><a rel="nofollow">BSidesDE (Delaware)</a>&nbsp;: [irongeek: 2013]</li>
<li><a rel="nofollow">BSidesOrlando</a>&nbsp;</li>
<li><a rel="nofollow">BSidesWarsaw</a>&nbsp;</li>
<li><a rel="nofollow">BSidesSLC</a>&nbsp;</li>
<li><a rel="nofollow">BSidesSF</a>&nbsp;: [irongeek: 2015 • 2016]</li>
<li><a rel="nofollow">BSidesPhilly</a>&nbsp; (Philadelphia): [irongeek: 2016 • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>BSides Tel Aviv: <a rel="nofollow">BSidesTLV2017</a>&nbsp; &amp; <a rel="nofollow">BSidesTLV2016</a>&nbsp;</li>
<li>BSidesLA/ShellCon: <a rel="nofollow">ShellCon 2017</a>&nbsp;.</li>
<li>BSidesCharm: [<a rel="nofollow">2016</a>&nbsp;] [irongeek: 2017]</li>
<li>BSides Asheville: <a rel="nofollow">2014</a>&nbsp; • 2015 (<a rel="nofollow">Sat</a>&nbsp;, <a rel="nofollow">Sun</a>&nbsp;) • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;</li>
<li><a rel="nofollow">BSidesCalgary</a>&nbsp; (@bsides_calgary): [2016 • 2017] (FIXME: years need to be separated into playlists)</li>
<li>BSidesNYC: [<a rel="nofollow">2018</a>&nbsp;]</li>
<li>BSides Ljubljana (@BSidesLjubljana): [<a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>BSides Hamburg (@HamburgSides): [<a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp;]</li>
<li>BSides Hannover (@BSidesHN): [<a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">BSides Belfast</a>&nbsp; (@bsidesbelfast): [<a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">BSides Munich</a>&nbsp; (@BSidesMunich): [2017 (<a rel="nofollow">YouTube</a>&nbsp; | <a rel="nofollow">archive.org</a>&nbsp;)]</li>
<li><a rel="nofollow">BSides Bordeaux</a>&nbsp; (@BSidesBDX): [<a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">BSides Luxembourg</a>&nbsp; (@BSidesLux): [<a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">BSides Amsterdam</a>&nbsp; (@BSidesAMS): [<a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">BSides Manchester</a>&nbsp; (@BSidesMCR): [<a rel="nofollow">2014</a>&nbsp; inc. • <a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
<li><a rel="nofollow">BSides <del>Edinburgh</del> Scotland</a>&nbsp; (@BSidesScot): <a rel="nofollow">2017</a>&nbsp;</li>
<li>BSides Tampa: [irongeek: 2015 • <a rel="nofollow">2017</a>&nbsp;]</li>
<li>BSides NoVa (Northern Virginia): [irongeek: 2017]</li>
<li>BSides Cleveland: [irongeek: 2014 • 2015 • 2017]</li>
<li>BSides Detroit: [irongeek: 2015 • 2016 • 2017]</li>
<li>BSides Nashville: [irongeek: 2014 • 2015 • 2017]</li>
<li>BSides Indy (Indianapolis): [irongeek: 2017]</li>
<li>BSides Augusta: [irongeek: 2015 • 2016]</li>
<li>BSidesCincy (Cincinnati): [irongeek: 2015]</li>
<li>BSides Boston: [irongeek: 2015]</li>
<li>BSides Columbus: [irongeek: 2015]</li>
<li>BSidesRI (Rhode Island): [<a rel="nofollow">2013</a>&nbsp;]</li>
<li>BSides Chicago: [irongeek: 2014]</li>
<li>[BSides Leeds] (@BSidesLeeds): [<a rel="nofollow">2018</a>&nbsp;]</li>
<li>BSides Pittsburgh: [<a rel="nofollow">2015</a>&nbsp; • <a rel="nofollow">2016</a>&nbsp; • <a rel="nofollow">2017</a>&nbsp;]</li>
</ol>

###Meetups That Record Their Talks

<ol start="0">
<li><a rel="nofollow">SecKC</a>&nbsp;</li>
<li><a rel="nofollow">SecDSM</a>&nbsp;</li>
<li>Louisville ISSA Web Pentesting workshop [<a rel="nofollow">2013</a>&nbsp;] <code>[pentesting + appsec + bug bounty]</code></li>
<li>Louisville Nmap workshop [<a rel="nofollow">2014</a>&nbsp;] <code>[pentesting]</code></li>
<li><a rel="nofollow">Steel City InfoSec</a>&nbsp;</li>
<li>To explore infosec/hacker events near you (&amp; see talks in person &amp;/or meet local infosec folk [we don't bite! usually!]), check out @nyxgeek's world map of security meetups&amp;conferences at <a rel="nofollow">hackermaps.org</a>&nbsp;, &amp; check out @evilsocket's <a rel="nofollow">ConfWatch.Ninja</a>&nbsp; (@confwatchninja) for a schedule of upcoming cons. &lt;3</li>
</ol>

##Other Audiovisual Multimedia

###Shows &amp;/or Livestreams

<ol start="0">
<li>@LiveOverflow's <a rel="nofollow">livestream</a>&nbsp; <code>[CTF + reverse engineering + exploit dev]</code></li>
<li>@TheColonial's <a rel="nofollow">OJ Reeves/th3colon1al livestream</a>&nbsp; <code>[Metasploit, Meterpreter dev + exploit dev]</code></li>
<li>@gynvael Coldwind's <a rel="nofollow">livestream</a>&nbsp; <code>[CTF + reverse engineering]</code></li>
<li>@hedgeberg's <a rel="nofollow">livestream</a>&nbsp; <code>[reverse engineering + hardware hacking + console hacking]</code></li>
<li>@ktemkin's <a rel="nofollow">livestream</a>&nbsp; <code>[reverse engineering + hardware hacking]</code></li>
<li>@_r00k_'s <a rel="nofollow">livestreams + walkthroughs</a>&nbsp; <code>[CTF walkthroughs]</code></li>
<li>@MurmusCTF's <a rel="nofollow">walkthroughs</a>&nbsp; <code>[CTF walkthroughs]</code></li>
<li>@IppSec's <a rel="nofollow">walkthroughs</a>&nbsp; <code>[CTF walkthroughs]</code></li>
<li><a rel="nofollow">MeshX93</a>&nbsp; <code>[walkthroughs]</code></li>
<li><a rel="nofollow">webpwnized</a>&nbsp; <code>[appsec, websec, netsec]</code></li>
<li>Micah Elizabeth Scott's @scanlime show: <a rel="nofollow">YouTube</a>&nbsp; • <a rel="nofollow">Patreon</a>&nbsp; <code>[reverse engineering + sundry]</code></li>
<li>John Hammond's <a rel="nofollow">YouTube channel</a>&nbsp; <code>[CTF walkthroughs + programming tutorials]</code></li>
<li><a rel="nofollow">Cybersecurity Camp</a>&nbsp;</li>
<li>@Hak5's <a rel="nofollow">tutorials</a>&nbsp; (with @Snubs, @mubix, @hak5darren) <code>[basic skills + pentesting]</code>
0. Hak5: <a rel="nofollow">Seasons 1-5</a>&nbsp; • <a rel="nofollow">Seasons 6-10</a>&nbsp; • <a rel="nofollow">Seasons 11-15</a>&nbsp;
0. <a rel="nofollow">Open Source Recommendations</a>&nbsp;
0. <a rel="nofollow">Hack Across the Planet</a>&nbsp;
0. <a rel="nofollow">3D Printing</a>&nbsp;
0. <a rel="nofollow">HakTip</a>&nbsp; with @Snubs
0. <a rel="nofollow">Metasploit Minute</a>&nbsp; with @mubix</li>
<li><a rel="nofollow">SecurityTube</a>&nbsp;</li>
<li>@DAkacki @da_667 @oscaron @benheise @Ajediday &amp; @mzbat's <a rel="nofollow">Rally Security</a>&nbsp; <code>[weekly news breakdown]</code></li>
<li>@HECFBlog's <a rel="nofollow">Forensic Lunch</a>&nbsp; <code>[DFIR]</code></li>
<li>Sam Bowne's <a rel="nofollow">livestreamed infosec classes</a>&nbsp; <code>[Careers in Computer Networking • Ethical Hacking &amp; Network Defense • CISSP prep • Securing Web Applications • Exploit Development]</code></li>
<li><a rel="nofollow">vTriple livestream</a>&nbsp; <code>[DFIR &amp; dev]</code></li>
<li>@struppigel's <a rel="nofollow">Malware Analysis for Hedgehogs</a>&nbsp; <code>[DFIR + malware analysis]</code></li>
<li>@hasherezade's <a rel="nofollow">walkthroughs</a>&nbsp; <code>[malware analysis + reverse engineering]</code></li>
<li><a rel="nofollow">Colin Hardy</a>&nbsp; <code>[malware analysis + reverse engineering]</code></li>
<li>@herrcore + @seanmw's <a rel="nofollow">Open Analysis Labs #OpenAnalysisLive</a>&nbsp; <code>[malware analysis + reverse engineering]</code></li>
<li><a rel="nofollow">Computerphile</a>&nbsp;</li>
<li><a rel="nofollow">SDR intro with Michael Ossmann</a>&nbsp;</li>
<li>@SecureTheHuman's <a rel="nofollow">SANS Security Awareness</a>&nbsp;: <a rel="nofollow">SecureTheHuman webcasts</a>&nbsp; <code>[soft skills + security awareness]</code></li>
<li><a rel="nofollow">Big Brain Security</a>&nbsp;</li>
<li>@duosec's <a rel="nofollow">DuoSec Talks</a>&nbsp;</li>
<li>@BHinfoSecurity's <a rel="nofollow">webinars</a>&nbsp; <code>[pentesting]</code></li>
<li>@brompwnie's <a rel="nofollow">livestreams</a>&nbsp; <code>[android hacking]</code></li>
<li><a rel="nofollow">ChiefRiver</a>&nbsp; videos <code>[pentesting + windows]</code></li>
<li><a rel="nofollow">#nullconchat</a>&nbsp; <code>[live infosec-themed discussion on Twitter]</code></li>
<li>@thatsjet's <a rel="nofollow">@DevSecOpsLIFE</a>&nbsp; <code>[DevSecOps]</code></li>
<li>@424f424f, @dafthack, @ustayready, + @ralphte1's @CoinSecPodcast: <a rel="nofollow">YouTube</a>&nbsp; • <a rel="nofollow">Spotify</a>&nbsp; <code>[cryptocurrency]</code></li>
<li>@dildog's <a rel="nofollow">Noctem livestream</a>&nbsp;</li>
<li>@FuzzySec's <a rel="nofollow">Patreon livestream</a>&nbsp; <code>[red team, pentesting, exploit dev, general amazingness]</code></li>
<li><a rel="nofollow">@TrustedSec TV</a>&nbsp;</li>
<li>@samykamkar's <a rel="nofollow">tutorials</a>&nbsp;</li>
<li>@gattaca's <a rel="nofollow">Liquid Matrix Security Digest TV</a>&nbsp;: [<a rel="nofollow">full episodes</a>&nbsp; • <a rel="nofollow">mini episodes</a>&nbsp;]</li>
<li>The Internet Society's various livestreamed events: [ <a rel="nofollow">I</a>&nbsp; • <a rel="nofollow">II</a>&nbsp; ]</li>
</ol>

<hr>

###Podcasts

<ol start="0">
<li>Paul Asadoorian's Security Weekly (@securityweekly @swfeeds) podcasts: [<a rel="nofollow">official website</a>&nbsp; • <a rel="nofollow">YouTube</a>&nbsp; • infocon.org: <a rel="nofollow">PaulDotCom Weekly</a>&nbsp; &amp;&amp; <a rel="nofollow">Security Weekly</a>&nbsp;]
<ol>
<li><a rel="nofollow">Paul's Security Weekly</a>&nbsp;: with @haxorthematrix @securityweekly @Carlos_Perez @jack_daniel @MrJeffMan @joff_thyer</li>
<li><a rel="nofollow">Hack Naked News</a>&nbsp;: with @securityweekly @Jason_Wood</li>
<li><a rel="nofollow">Enterprise Security Weekly</a>&nbsp;: with @securityweekly @strandjs</li>
<li><a rel="nofollow">Business|Startup Security Weekly</a>&nbsp;: with @securityweekly @catalyst</li>
<li><a rel="nofollow">Secure Digital Life</a>&nbsp;: with @dougwhitephd @rbeauchemin <code>[newbie friendly • security ambassadoring]</code></li>
<li><a rel="nofollow">Tradecraft Security Weekly</a>&nbsp;:</li>
<li><a rel="nofollow">Application Security Weekly</a>&nbsp;: with @securityweekly @andMYhacks</li>
<li><a rel="nofollow">Interviews</a>&nbsp;</li>
</ol>

</li>
<li>@chrissanders88's <a rel="nofollow">Source Code</a>&nbsp; <code>[interviews with infosec folks re: path into infosec]</code></li>
<li>@maliciouslink &amp; @lerg's <a rel="nofollow">Defensive Security</a>&nbsp; (@Defensivesec) podcast: <code>[general]</code></li>
<li>@bryanbrake &amp; @InfoSystir's @BrakeSec podcast: <a rel="nofollow">podcast</a>&nbsp; • <a rel="nofollow">YouTube</a>&nbsp; <code>[general]</code></li>
<li>Patrick Gray (@riskybusiness)'s <a rel="nofollow">Risky Business security podcast</a>&nbsp;: [<a rel="nofollow">official site</a>&nbsp; • <a rel="nofollow">infocon</a>&nbsp;]<code>[general]</code></li>
<li>@steved3's #SaltedHash podcast: [<a rel="nofollow">video</a>&nbsp; • <a rel="nofollow">podcast</a>&nbsp;] {from @csoonline}</li>
<li>@DanielMiessler's <a rel="nofollow">Unsupervised Learning podcast</a>&nbsp; <code>[weekly news]</code></li>
<li>@CyberSecStu's @TheManyHatsClub's weekly interviews with infosec folk (<a rel="nofollow">livestream on Discord</a>&nbsp; • <a rel="nofollow">podcast</a>&nbsp;) <code>[general]</code></li>
<li>The <a rel="nofollow">Southern Fried Security Podcast</a>&nbsp; (@SFSPodcast): [<a rel="nofollow">official site</a>&nbsp; • <a rel="nofollow">infocon</a>&nbsp; • <a rel="nofollow">iTunes</a>&nbsp;]</li>
<li>@phillmoore's <a rel="nofollow">This Week in 4n6</a>&nbsp;: <code>[roundup of interesting DFIR items + podcast]</code></li>
<li>@humanhackers's <a rel="nofollow">The Social-Engineer Podcast #SEPodcast</a>&nbsp;: [<a rel="nofollow">official site</a>&nbsp; • <a rel="nofollow">infocon</a>&nbsp;] <code>[social engineering]</code></li>
<li>@wadebaker &amp; @jayjacobs' <a rel="nofollow">@cyentiainst Podcast</a>&nbsp;</li>
<li>@gcluley &amp; @caroletheriault's <a rel="nofollow">@SmashinSecurity</a>&nbsp; <code>[weekly news breakdown]</code></li>
<li>@XenoPhage &amp; AgentSixty6's <a rel="nofollow">Iron Sysadmin Podcast (@ironsysadmin)</a>&nbsp; <code>[adjacent: sysad]</code></li>
<li>@kyleshevlin's <a rel="nofollow">@2ndCareerDevs</a>&nbsp; <code>[adjacent: devops + lateral]</code></li>
<li>@7MinSec's <a rel="nofollow">7 Minute Security podcast</a>&nbsp;</li>
<li>@PurpleSquadSec's <a rel="nofollow">Purple Squad Security podcast</a>&nbsp;</li>
<li>The <a rel="nofollow">Cyberwire (@thecyberwire)</a>&nbsp; podcasts</li>
<li><a rel="nofollow">Darknet Diaries</a>&nbsp; <code>[cybercrime]</code></li>
<li>Stewart A. Baker's <a rel="nofollow">Cyberlaw Podcast</a>&nbsp; <code>[cyberlaw stuff from former NSA general counsel]</code></li>
<li>@LawyerLiz's <a rel="nofollow">#BuzzOffwithLawyerLiz</a>&nbsp; <code>[law + policy + tech]</code></li>
<li>@Jenny_Radcliffe's <a rel="nofollow">#HumanFactor podcast</a>&nbsp; <code>[social engineering]</code></li>
<li>@embeddedfm's <a rel="nofollow">Embedded</a>&nbsp; <code>[hardware hacking-ish]</code></li>
<li>Steve Gibson (@SGgrc) &amp; Leo Laporte's <a rel="nofollow">Security Now!</a>&nbsp; podcast: [<a rel="nofollow">infocon</a>&nbsp; • <a rel="nofollow">iTunes</a>&nbsp; • <a rel="nofollow">RSS</a>&nbsp; • <a rel="nofollow">twit.tv</a>&nbsp;]</li>
<li>@textfiles' Jason Scott Talks His Way Out of It podcast: [<a rel="nofollow">YouTube</a>&nbsp; • <a rel="nofollow">Patreon</a>&nbsp;]</li>
<li>Michael Bazzell (@IntelTechniques)'s <a rel="nofollow">Complete Privacy &amp; Security Podcast</a>&nbsp; <code>[privacy + OSINT]</code></li>
<li>@edgeroute &amp; @RobertHurlbut's <a rel="nofollow">@AppSecPodcast</a>&nbsp; <code>[appsec]</code></li>
<li>@CSI_Podcast's <a rel="nofollow">Cyber Security Interviews</a>&nbsp; podcast</li>
<li>The <a rel="nofollow">Security Ledger (@securityledger)</a>&nbsp; podcast</li>
<li>The <a rel="nofollow">Ask Mr. DNS Podcast</a>&nbsp; <code>[netsec]</code></li>
<li>SANS Internet Storm Center (@sans_isc)'s daily <a rel="nofollow">ISC StormCast</a>&nbsp; podcast: <code>[threat hunting • malware analysis • blue team • DFIR]</code></li>
<li>2600's <a rel="nofollow">Off The Wall</a>&nbsp; Radio Show: [<a rel="nofollow">archives: 2003–2018</a>&nbsp; • <a rel="nofollow">infocon.org: 2006–2014</a>&nbsp;]</li>
<li>2600's <a rel="nofollow">Off The Hook</a>&nbsp; Radio Show (@HackerRadioShow): [<a rel="nofollow">iTunes</a>&nbsp; • <a rel="nofollow">infocon.org: 2006–2016</a>&nbsp;]</li>
<li>Phone Losers of America's <a rel="nofollow">The Snow Plow Show: phone comedy podcast</a>&nbsp;: [<a rel="nofollow">official site</a>&nbsp; • <a rel="nofollow">infocon</a>&nbsp; • <a rel="nofollow">Patreon</a>&nbsp;]</li>
<li>@securitycurrent's <a rel="nofollow">Security Current</a>&nbsp; podcast</li>
<li>@gattaca's <a rel="nofollow">Liquid Matrix Security Digest podcast</a>&nbsp;: [<a rel="nofollow">iTunes</a>&nbsp; • <a rel="nofollow">infocon</a>&nbsp; • <a rel="nofollow">YouTube</a>&nbsp;]</li>
<li>@OWASP's <a rel="nofollow">OWASP 24/7</a>&nbsp; Podcast: [<a rel="nofollow">official site</a>&nbsp; • infocon: <a rel="nofollow">I</a>&nbsp;, <a rel="nofollow">II</a>&nbsp;] (FIXME: neither infocon directory is well-organized)</li>
<li>Bob Rudis &amp; Jay Jacob's <a rel="nofollow">Data Driven Security podcast</a>&nbsp; <code>[security + data analytics • data visualization]</code></li>
<li>The <a rel="nofollow">SteptoeCyberLaw</a>&nbsp; Podcast: [<a rel="nofollow">official site</a>&nbsp; • <a rel="nofollow">infocon</a>&nbsp;] <code>[law]</code></li>
<li>[Down The Security Rabbithole] (@DtSR_Podcast, wh1t3rabbit) podcast: [<a rel="nofollow">official site</a>&nbsp; • <a rel="nofollow">infocon</a>&nbsp;]</li>
<li>The <a rel="nofollow">Social Media Security</a>&nbsp; Podcast: [<a rel="nofollow">official site</a>&nbsp; • <a rel="nofollow">infocon</a>&nbsp;]</li>
<li><a rel="nofollow">Defrag This</a>&nbsp; (@defrag_this) podcast</li>
<li>Bruce Shneier (@schneierblog)'s <a rel="nofollow">Crypto-Gram podcast</a>&nbsp;: [<a rel="nofollow">official site</a>&nbsp; • <a rel="nofollow">infocon.org</a>&nbsp; (pre-2010) • <a rel="nofollow">newsletter</a>&nbsp;]</li>
<li>CERT's <a rel="nofollow">Security for Business Leaders</a>&nbsp; podcast: [<a rel="nofollow">iTunes</a>&nbsp;] <code>[management]</code></li>
<li><a rel="nofollow">RunAs Radio</a>&nbsp; podcast: [<a rel="nofollow">iTunes</a>&nbsp; • <a rel="nofollow">RSS</a>&nbsp;]</li>
<li>The <a rel="nofollow">Standard Deviant Security Podcast</a>&nbsp; (@standeviant): [<a rel="nofollow">Stitcher</a>&nbsp;]</li>
<li>The <a rel="nofollow">In-Security Podcast</a>&nbsp;: [<a rel="nofollow">iTunes</a>&nbsp; • <a rel="nofollow">RSS</a>&nbsp;]</li>
<li>ISMG Network Podcasts:
<ol>
<li>The <a rel="nofollow">Healthcare Information Security</a>&nbsp; Podcast</li>
<li>The <a rel="nofollow">Careers Information Security</a>&nbsp; Podcast</li>
<li>The <a rel="nofollow">Data Breach Today</a>&nbsp; Podcast</li>
<li>The <a rel="nofollow">Banking Information Security</a>&nbsp; Podcast</li>
</ol>

</li>
<li><a rel="nofollow">infocon.org</a>&nbsp; has archives of several older podcasts:
<ol>
<li><a rel="nofollow">CERT.org podcast</a>&nbsp;: 2006–2014</li>
<li><a rel="nofollow">CyberSpeak podcast</a>&nbsp;: 2006–2013</li>
<li><a rel="nofollow">Eurotrash Security podcast</a>&nbsp;: pre-2014</li>
<li><a rel="nofollow">Exotic Liability podcast</a>&nbsp;: pre-2010</li>
<li><a rel="nofollow">Hacker Podcast Radio</a>&nbsp;: pre-2014</li>
<li><a rel="nofollow">Security Management Podcast</a>&nbsp;: pre-2014</li>
<li><a rel="nofollow">Network Security Podcast podcast</a>&nbsp;: 2014</li>
<li><a rel="nofollow">Finux Tech Whatever</a>&nbsp;: (FIXME: files seem to be missing; anybody have an archive?)</li>
<li><a rel="nofollow">hacktv.org podcast</a>&nbsp;: (FIXME: files seem to be missing; anybody have an archive?)</li>
<li><a rel="nofollow">Hacker News Network (HNN)</a>&nbsp;:
<ol>
<li><a rel="nofollow">HHNCast:</a>&nbsp;: 2009–2011?</li>
<li><a rel="nofollow">ToolTime</a>&nbsp;: 2010-2011</li>
<li><a rel="nofollow">Stack of Shame</a>&nbsp;: 2010-2011</li>
<li><a rel="nofollow">ConFu</a>&nbsp;: 2010-2011</li>
<li><a rel="nofollow">Behind The Firewall</a>&nbsp;: (FIXME: only one clip; anybody have a complete archive?)</li>
</ol>

</li>
<li><a rel="nofollow">Hak5</a>&nbsp; (@Hak5):
0. NOTE: For more up-to-date links, cf. @Hak5 entries in <a>Shows &amp;/or Livestreams</a>&nbsp; above.
<ol>
<li><a rel="nofollow">ThreatWire</a>&nbsp;: 2015-2016</li>
<li><a rel="nofollow">HakTip + Metasploit Minute</a>&nbsp;</li>
<li><a rel="nofollow">Hak5</a>&nbsp;: (seems to be episodes from their YouTube show?)</li>
</ol>

</li>
</ol>

####Podcasts from Companies

<ol start="0">
<li>@TalosSecurity's <a rel="nofollow">Beers with Talos podcast</a>&nbsp; (from @TalosSecurity) <code>[news, netsec]</code></li>
<li>@Sophos's <a rel="nofollow">Naked Security Podcast</a>&nbsp; {from @Sophos}</li>
<li>@IBM's <a rel="nofollow">Security Intelligence Podcast</a>&nbsp; {from @IBM}</li>
<li>@BrianRexroad &amp; @jclausing's <a rel="nofollow">#ThreatTraq</a>&nbsp; {from @ATT}</li>
<li>Shaun Walsh (@cingulus)'s <a rel="nofollow">InSecurity Podcast</a>&nbsp; {from @cylance}</li>
<li>@cybereason's <a rel="nofollow">malicious.life (@MaliciousLife) Podcast</a>&nbsp; {from @cybereason}</li>
<li><a rel="nofollow">TrustedSec Security Podcast</a>&nbsp; {from @TrustedSec}</li>
<li>Gary McGraw's <a rel="nofollow">Silver Bullet Security</a>&nbsp; podcast: [<a rel="nofollow">iTunes</a>&nbsp; • <a rel="nofollow">YouTube</a>&nbsp; • infocon: [<a rel="nofollow">I</a>&nbsp;, <a rel="nofollow">II</a>&nbsp;]] {from IEEE Security &amp; Privacy}</li>
<li>@mike_mimoso &amp; Chris Brook's <a rel="nofollow">The Threatpost Podcast</a>&nbsp;: [<a rel="nofollow">iTunes</a>&nbsp; • <a rel="nofollow">RSS</a>&nbsp; {from @ThreatPost}</li>
<li>Jessica Ortega, Ram Gall, Topher Tebow's <a rel="nofollow">Decoding Security</a>&nbsp; podcast: [<a rel="nofollow">official site</a>&nbsp; • <a rel="nofollow">YouTube</a>&nbsp; • <a rel="nofollow">iTunes</a>&nbsp;] {from @SiteLock}</li>
<li>@nuix's <a rel="nofollow">Unscripted</a>&nbsp; podcast: {from @nuix}</li>
<li>@tripwire's <a rel="nofollow">Security Slice</a>&nbsp; podcast: {from @tripwire}</li>
</ol>

##Playgrounds!: Practice Materials &amp;&amp; Labs (FOSS)

<ol start="0">
<li>@blackroomsec's <a rel="nofollow">List of Hacking &amp; CTF Challenge Sites - Updated February 2, 2018</a>&nbsp;</li>
<li>@FSecure's <a rel="nofollow">Cyber Security MOOC</a>&nbsp;</li>
<li>@0xmchow's <a>COMP 116: Introduction to Computer Security</a>&nbsp;</li>
<li>Rensselaer Polytechnic Institute's @RPISEC <a>CSCI 4968: Modern Binary Exploitation</a>&nbsp; • <a>CSCI 4976: Malware Analysis</a>&nbsp; <code>[exploit dev • malware analysis]</code></li>
<li>@XenoKovah &amp; co's <a rel="nofollow">introductory infosec classes</a>&nbsp; <code>[29 classes with videos; 63 days of open source class materials—many domains]</code></li>
<li>Get some "help desk"-esque experience online &amp; learn beginning malware triage/analysis for free: @BleepinComputer's <a rel="nofollow">Malware Removal Training Program</a>&nbsp;<code>[malware analysis]</code></li>
<li>@chrissanders88's <a rel="nofollow">The Cuckoo's Egg Decompiled</a>&nbsp; <code>[intro to SOC • NSM • DFIR]</code></li>
<li>@bartblaze's <a>Introduction to Malware Analysis, Threat Intelligence, &amp; Reverse Engineering</a>&nbsp; <code>[malware analysis!!! • threat intelligence • reverse engineering]</code></li>
<li>JPCERT/CC's <a rel="nofollow">catalogue of DFIR artifacts left by common attack tools</a>&nbsp; <code>[threat hunting • DFIR]</code></li>
<li><a rel="nofollow">HackTheBox.eu</a>&nbsp; <code>[mostly pentesting • red team, but a few DFIR challenges too]</code></li>
<li>@daeken's <a rel="nofollow">Hacker101.com</a>&nbsp; <code>[bug bounty • websec • appsec • pentesting • netsec]</code> {from @Hacker0x01}</li>
<li>@OWASP's <a>collection of vulnerable web apps</a>&nbsp; <code>[bug bounty • pentesting • websec • appsec • netsec]</code></li>
<li><a rel="nofollow">Damn Vulnerable Web App (DVWA) VM</a>&nbsp; <code>[bug bounty • appsec]</code></li>
<li>@b1ack0wl's <a>Damn Vulnerable Router</a>&nbsp; <code>[embedded • exploit dev • pentesting]</code></li>
<li>@ProjectHoneynet <a rel="nofollow">challenge archive</a>&nbsp; <code>[DFIR]</code></li>
<li>@Fox0x01's <a rel="nofollow">ARM reverse engineering tutorials</a>&nbsp; &amp; <a rel="nofollow">ARM assembly introduction</a>&nbsp; <code>[reverse engineering (ARM)]</code></li>
<li>@malwareunicorn's <a rel="nofollow">RE101 &amp; RE102</a>&nbsp; <code>[reverse engineering (x86) + malware analysis intro]</code></li>
<li>@malware_traffic's <a rel="nofollow">malware traffic analysis exercises</a>&nbsp; <code>[network forensics]</code></li>
<li>@FuzzySec's <a rel="nofollow">exploit dev tutorials</a>&nbsp; <code>[exploit dev • pentesting • red team]</code></li>
<li>@abatchy17's <a rel="nofollow">Windows Kernel Exploitation tutorial series + Vulnhub walkthroughs</a>&nbsp; <code>[exploit dev • red team]</code></li>
<li>@sambowne's <a rel="nofollow">samsclass.info</a>&nbsp;</li>
<li>@bellis1000's <a>Exploit Challenges</a>&nbsp; <code>[exploit dev]</code></li>
<li><a rel="nofollow">ROP Emporium</a>&nbsp; <code>[exploit dev]</code></li>
<li>@g0tmi1k's <a rel="nofollow">@VulnHub, a vulnerable VM repository</a>&nbsp; + <a rel="nofollow">walkthroughs</a>&nbsp; <code>[pentesting • red team • exploit dev • bug bounty]</code></li>
<li><a rel="nofollow">exploit-exercises.com</a>&nbsp; <code>[exploit dev]</code></li>
<li><a rel="nofollow">root-me.org</a>&nbsp; <code>[exploit dev • etc]</code></li>
<li><a rel="nofollow">GNS3</a>&nbsp; <code>[neteng + netsec — you'll need to track down firmware images, though]</code></li>
<li><a rel="nofollow">#DailyScriptlets</a>&nbsp; <code>[practice malware analysis • DFIR]</code></li>
<li>@CTFtime's <a rel="nofollow">CTFtime.org</a>&nbsp; <code>[find currently scheduled CTFs]</code></li>
<li>@Magoo's <a rel="nofollow">Incident Response tabletop scenarios (@badthingsdaily)</a>&nbsp; <code>[DFIR • incident response • blue team]</code></li>
<li><a rel="nofollow">Hacking Printers wiki</a>&nbsp; <code>[pentesting]</code></li>
<li>Want to build your own virtual homelab to practice in? GOOD. Go buy @da_667's Big Black Tome, <a rel="nofollow">Building Virtual Machine Labs: A Hands-On Guide</a>&nbsp;.</li>
<li>Issues of <a>PoC||GTFO</a>&nbsp; are usually hackable. &gt;:D</li>
</ol>

##Workstation VMs (Virtual Machines)

<ol start="0">
<li>@SANS' <a rel="nofollow">SIFT Workstation VM</a>&nbsp; <code>[DFIR Linux (Ubuntu) distro]</code></li>
<li>@SANS' <a rel="nofollow">Remnux Workstation VM</a>&nbsp; <code>[malware analysis • reverse engineering Linux (Ubuntu) distro]</code></li>
<li>@IntelTechniques' <a rel="nofollow">Buscador VM</a>&nbsp; <code>[OSINT+RECON Linux (Ubuntu) distro]</code></li>
<li>@securityonion's <a>SecurityOnion VM</a>&nbsp; <code>[NSM+IDS+IPS • netsec Linux (Ubuntu) distro]</code></li>
<li>@offsectraining's <a rel="nofollow">Kali VM (@kalilinux)</a>&nbsp; <code>[offensive security • pentesting Linux distro]</code></li>
<li>@Zero_ChaosX's <a rel="nofollow">Pentoo VM (@pentoo_linux)</a>&nbsp; <code>[wireless+SDR+RF Linux (Gentoo) distro]</code></li>
<li>@ParrotSec's <a rel="nofollow">Parrot Security OS VM</a>&nbsp; <code>[pentesting • DFIR Linux (Debian) distro]</code></li>
<li>@rootkovska's <a rel="nofollow">@QubesOS</a>&nbsp;</li>
<li>@ShadowDXS's <a rel="nofollow">guide to installing Arch Linux</a>&nbsp;</li>
</ol>

##Introductory Resources for the Complete Newbie

<ol start="0">
<li><a rel="nofollow">A Non-Nerd's Guide to the Command Line</a>&nbsp;</li>
<li>@mpratland's <a rel="nofollow">Terminus</a>&nbsp; <code>[super gentle introduction to using a CLI]</code></li>
<li><a rel="nofollow">explainshell.com</a>&nbsp; <code>[help break down common commands you don't understand]</code></li>
<li>OverTheWire's <a rel="nofollow">Wargames</a>&nbsp; <code>[beginning exercises for bash scripting, exploit dev, bug bounty-ish stuff...go through Bandit to get used to CLIs]</code></li>
<li><a>"The Art of the Command Line"</a>&nbsp;</li>
<li><a>What happens when...</a>&nbsp;: uses the example of searching Google to traverse different domains; common interview question]`</li>
<li><a rel="nofollow">Stack Overflow: Helping One Million Developers Exit Vim</a>&nbsp; <code>[so you will understand the Exiting Vim memes]</code></li>
</ol>

##Hacker History &amp; Culture

<ol start="0">
<li><a rel="nofollow">@nyxgeek's reading list</a>&nbsp;: read up on your #HackerHistory, fam. &lt;3</li>
<li><a>The Hacker's Manifesto</a>&nbsp;</li>
<li>@jack_daniel's <a rel="nofollow">Shoulders of Infosec</a>&nbsp; project</li>
<li><a rel="nofollow">SecLists.Org Security Mailing List Archive</a>&nbsp;</li>
<li><a rel="nofollow">2600: The Hacker Quarterly</a>&nbsp;</li>
<li><a rel="nofollow">Phrack Magazine</a>&nbsp;</li>
<li><a rel="nofollow">Uninformed Magazine:</a>&nbsp; Informative Information for the Uninformed</li>
<li>POC||GTFO: Proof of Concept or Get The Fuck Out!: [download mirrors: <a rel="nofollow">alchemistowl.org</a>&nbsp; • <a rel="nofollow">greatscottgadgets</a>&nbsp; • <a rel="nofollow">ludost.net</a>&nbsp; • <a>github.com/filcab</a>&nbsp;]
{Please note <a rel="nofollow">this blogpost|contalk</a>&nbsp; from @ESultanik that explains how you can play with several issues' polyglots. ;)}</li>
<li>Jason Scott (@textfiles)'s <a rel="nofollow">textfiles.com</a>&nbsp;</li>
<li><a rel="nofollow">OpenRCE.org articles</a>&nbsp;</li>
<li>archive.org's <a rel="nofollow">HyperCard Stacks</a>&nbsp; archive</li>
<li><a rel="nofollow">Bastard Operator from Hell (BOFH)</a>&nbsp;</li>
<li>DEFCON's <a rel="nofollow">Hacker Movie List</a>&nbsp;</li>
</ol>

原文 / From https://github.com/1337list/ephemera-miscellany/blob/master/hackertalkytalk.md